CVE-2022-20623

published 2022-02-23

CVE-2022-20623: A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could…

Priority P3 49 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. This vulnerability is due to a logic error in the BFD rate limiter functionality. An attacker could exploit this vulnerability by sending a crafted stream of traffic through the device. A successful exploit could allow the attacker to cause BFD traffic to be dropped, resulting in BFD session flaps. BFD session flaps can cause route instability and dropped traffic, resulting in a denial of service (DoS) condition. This vulnerability applies to both IPv4 and IPv6 traffic.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_nx-os_software	—	—
cisco	nexus_9000_series_switches_bidirectional_forwarding_detection	—	—
cisco	nx-os	10.1\(1\) – 10.2\(1\)	—
cisco	nx-os	7.0\(3\)i6\(2\) – 7.0\(3\)i7\(3\)	—
cisco	nx-os	7.0\(3\)i6\(2\) – 9.3\(8\)	—

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 7.1 HIGH AV:N/AC:M/Au:N/C:N/I:N/A:C

vendor_cisco 8.6 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-399